This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json) Hash identifier: tfEWXZLr4BYWLUElj8UYbPdfPX5A+N/tyzh2acfNxMc= Subject key identifier: CA:A1:3E:1D:E6:AF:A3:CF:E6:E5:AF:DD:0E:8A:0B:83:75:5D:AB:EB Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c Certificate serial: 019B5ABFE5C3B5F8935C88018D892C916C97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft Manifest number: 0BA6 Signing time: Fri 26 Dec 2025 13:01:24 +0000 Manifest this update: Fri 26 Dec 2025 13:01:24 +0000 Manifest next update: Sat 27 Dec 2025 13:01:24 +0000 Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: H3/B7wluZSDZooiENHl0xtDulBN23W2w/ka/o9PREzY=) 2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e5:c3:b5:f8:93:5c:88:01:8d:89:2c:91:6c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c Validity Not Before: Dec 26 13:01:24 2025 GMT Not After : Dec 27 13:01:24 2025 GMT Subject: CN=caa13e1de6afa3cfe6e5afdd0e8a0b83755dabeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:bb:48:72:12:df:60:53:5c:25:8c:1d:91: 99:12:59:f3:1f:9c:68:dc:68:56:6a:23:1a:23:9e: af:39:41:a8:ff:40:a1:7e:29:f4:f8:52:85:bc:07: 26:79:b7:14:7f:8e:e1:a1:e9:a6:d1:f4:c1:ab:00: 3d:c9:df:41:5b:6c:2a:13:ac:f5:96:13:c2:c2:af: 02:6f:47:c7:63:a3:cb:30:f4:df:a6:28:15:b3:b7: 71:12:35:f9:57:e9:a8:bb:16:de:da:48:36:c5:bd: 58:ce:ff:b3:b3:33:cc:3c:a9:04:c6:b9:79:60:0f: f0:74:7c:f8:bb:40:b1:c1:32:48:b4:62:03:80:c3: 14:86:ce:19:50:0e:c2:d3:2b:e9:a3:4c:81:ea:8d: a6:48:1e:97:c6:33:51:ac:9d:95:9b:ea:38:51:3f: 63:22:29:d7:ad:c1:39:0c:3f:91:00:00:f8:1e:90: 73:73:35:f5:2a:12:d4:bf:74:bf:39:33:90:26:29: 1b:28:72:d0:be:07:30:73:4b:cb:38:a3:13:0a:53: 28:b9:ad:36:6f:e2:38:47:a0:63:40:19:b4:02:72: 4e:94:3e:e5:ad:b4:c3:20:97:8d:c9:65:3d:8e:cf: a6:ed:1f:1e:8c:97:77:0b:90:74:9a:e4:fd:f2:97: d1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A1:3E:1D:E6:AF:A3:CF:E6:E5:AF:DD:0E:8A:0B:83:75:5D:AB:EB X509v3 Authority Key Identifier: keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:15:ec:a7:9f:7a:94:7c:bb:b0:f0:ff:b8:8b:e5:3d:91:a0: 72:1f:ba:75:1c:90:1b:cd:ff:ce:99:41:b8:e4:83:d7:7b:5f: 89:0b:f9:61:7f:fe:cd:b5:fe:97:d6:09:d1:c0:32:be:5f:58: 1c:65:46:cb:d7:d3:a4:57:73:36:85:0e:f0:b3:cc:38:22:d3: e0:1f:fb:91:64:50:e0:1a:35:d5:da:c6:df:0f:ec:cd:ef:e2: 8b:10:2b:da:39:b9:b3:a5:e3:88:54:69:56:18:61:c3:62:1f: 6f:9e:03:a1:27:cd:42:e2:27:e0:a9:9d:5b:7b:8e:78:b8:af: 1a:05:c2:ef:1b:ab:cf:69:bf:2f:ad:f3:85:0b:ef:d7:b4:50: 02:8c:39:89:aa:db:64:7d:60:02:2b:80:66:8a:d7:9a:9f:cb: 29:fb:91:5c:61:59:3a:80:4f:22:45:36:c4:c1:cb:a3:41:fb: f8:93:57:ee:db:d9:34:73:10:a1:44:31:07:5c:c3:a8:2a:47: c1:18:c9:84:90:fe:63:e6:3c:0a:c1:74:9b:e2:19:3c:60:0f: 97:ef:e4:fe:6c:e9:b8:78:72:ad:8a:86:82:f1:20:c8:97:96: 44:63:73:60:7b:2d:8d:fe:b3:1a:e1:59:29:27:69:99:7e:0c: be:c2:9a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+XDtfiTXIgBjYkskWyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1 ODE4MGMwHhcNMjUxMjI2MTMwMTI0WhcNMjUxMjI3MTMwMTI0WjAzMTEwLwYDVQQD EyhjYWExM2UxZGU2YWZhM2NmZTZlNWFmZGQwZThhMGI4Mzc1NWRhYmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1i7SHIS32BTXCWMHZGZElnzH5xo 3GhWaiMaI56vOUGo/0Chfin0+FKFvAcmebcUf47hoemm0fTBqwA9yd9BW2wqE6z1 lhPCwq8Cb0fHY6PLMPTfpigVs7dxEjX5V+mouxbe2kg2xb1Yzv+zszPMPKkExrl5 YA/wdHz4u0CxwTJItGIDgMMUhs4ZUA7C0yvpo0yB6o2mSB6XxjNRrJ2Vm+o4UT9j IinXrcE5DD+RAAD4HpBzczX1KhLUv3S/OTOQJikbKHLQvgcwc0vLOKMTClMoua02 b+I4R6BjQBm0AnJOlD7lrbTDIJeNyWU9js+m7R8ejJd3C5B0muT98pfRxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqhPh3mr6PP5uWv3Q6KC4N1XavrMB8GA1UdIwQY MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRXsp596 lHy7sPD/uIvlPZGgch+6dRyQG83/zplBuOSD13tfiQv5YX/+zbX+l9YJ0cAyvl9Y HGVGy9fTpFdzNoUO8LPMOCLT4B/7kWRQ4Bo11drG3w/sze/iixAr2jm5s6XjiFRp Vhhhw2Ifb54DoSfNQuIn4KmdW3uOeLivGgXC7xurz2m/L63zhQvv17RQAow5iarb ZH1gAiuAZorXmp/LKfuRXGFZOoBPIkU2xMHLo0H7+JNX7tvZNHMQoUQxB1zDqCpH wRjJhJD+Y+Y8CsF0m+IZPGAPl+/k/mzpuHhyrYqGgvEgyJeWRGNzYHstjf6zGuFZ KSdpmX4MvsKaNA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:51 2025 by rpki-client